From 2ed42992ed131b1419df6a04c27993a047c30385 Mon Sep 17 00:00:00 2001 From: Meng Meng Date: Sat, 13 Jun 2026 21:04:10 +0800 Subject: [PATCH] Potential fix for code scanning alert no. 29: DOM text reinterpreted as HTML Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- Mofang/templates/firewall.html | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Mofang/templates/firewall.html b/Mofang/templates/firewall.html index df836ba..1375ade 100644 --- a/Mofang/templates/firewall.html +++ b/Mofang/templates/firewall.html @@ -761,7 +761,8 @@ var rows = currentRules.map(function (rule, idx) { var dir = (rule.direction || 'in').toLowerCase(); var proto = (rule.protocol || 'tcp').toLowerCase(); - var action = (rule.action || 'ACCEPT').toUpperCase(); + var rawAction = (rule.action || 'ACCEPT').toUpperCase(); + var action = rawAction === 'ACCEPT' ? 'ACCEPT' : 'DROP'; var network = (rule.network || 'ipv4').toLowerCase(); var port = escapeHtml(portDisplay(rule.port)); var srcIp = escapeHtml(sourceIpDisplay(rule.source_ip));